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We claim: 


1 1. Apparatus for monitoring a local area network (LAN) 

2 through a remote administrative web site, the apparatus 

3 comprising: 

4 a service enablement platform (SEP) for connection 

5 to the LAN and for connection, through a wide area 

6 network (WAN) connection, to the administrative web site, 

7 wherein the SEP comprises: 
^ 8 a processor; 

y3 9 a memory, connected to the processor, for 

lt| 10 storing computer executable instructions therein; and 
^Ij 11 first and second network interfaces, operable 

\| 12 in conjunction with the processor, for communicatively 

m 13 interfacing the SEP, through a first network connection, 

C| 14 to the WAN and, through a second network connection, to 

jJT 15 the LAN, respectively; 

Ml 16 wherein the processor, in response to execution 

|*J 17 of the instructions: 

18 continually monitors operational status of 

19 a monitored entity so as to detect an alarm condition 

20 resulting from an operational failure in the monitored 

21 entity, the monitored entity comprising the SEP, at least 
2 2 one of the first and second connections or at least one 

23 of a plurality of servers residing on the LAN; 

24 generates, in response to the alarm 
2 5 condition, an alarm message containing information 
26 related to the alarm condition; 
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27 converts the alarm message into a 

28 predefined format suitable for communication over a web 

29 connection so as to yield a web- communicable alarm 
3 0 message ; and 

31 transmits the web- communicable alarm 

32 message, via the WAN interface and the first network 

33 connection, to the administrative web site which, in 

34 response to receipt of the web -communicable alarm 

35 message: 

36 extracts the alarm information from 
y3 37 the web- communicable alarm message so as to define 

J7J 38 extracted alarm information; and 

i£t 3 9 updates a record in a database, 

CI 

C/j 4 0 maintained by the administrative web site and associated 

^ 41 with the SEP, to reflect the extracted alarm information. 

77 1 2* The apparatus in claim 1 wherein the processor, in 

yj 2 response to execution of the stored instructions: 
EX 3 forms an HTTP message containing the alarm 

4 information; and 

5 encrypts the HTTP message to form the 

6 web- communicable message. 

1 3 . The apparatus in claim 2 wherein the SEP further 

2 comprises a web client executed by the processor and the 

3 administrative web site comprises a web server with the 

4 HTTP message being transported, via the WAN and over a 

5 web connection, from the web client to the web server. 
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1 4. The apparatus in claim 2 wherein the processor, in 

2 response to execution of the stored instructions, signs 

3 the HTTP message using a private key associated with the 

4 SEP prior to encrypting the HTTP message. 

1 5. The apparatus in claim 4 wherein the processor, in 

2 response to execution of the stored instructions: 

3 converts the alarm information in the alarm message 

4 into extensible markup language (XML) ; and 

5 forms the HTTP message as containing the XML. 

: i;ss5' 

77; 1 6. The apparatus in claim 5 wherein the processor, in 

lit 2 response to execution of the stored instructions: 

3 converts the alarm information message in the alarm 

^ 4 message into a corresponding WDDX hash structure; and 
Q 5 translates the WDDX hash structure into the XML. 

W 1 7. The apparatus in claim 6 wherein the XML, into which 

sT 2 the WDDX hash structure is converted, is serialized. 

1 8. The apparatus in claim 4 wherein the administrative 

2 web site in response to receiving the HTTP message: 

3 decrypts the HTTP message so as to define a 

4 decrypted HTTP message; 

5 authenticates the decrypted HTTP message using a 

6 signature contained within HTTP message; and 

7 if the decrypted HTTP message is authentic, updates 

8 the record in the database in response to the alarm 

9 information carried in decrypted HTTP message. 
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9. The apparatus in claim 8 wherein the administrative 
web site: 

converts XML contained within the decrypted HTTP 
message into a received WDDX hash structure; and 

updates the record in the database in response to 
alarm information contained in the received WDDX hash 
structure . 

10. The apparatus in claim 1 further comprising the 
administrative web site wherein the database contains a 
plurality of customer records, where each of the 
plurality of customer records is associated with a 
corresponding one of a plurality of different SEPs and 
each of the different SEPs is associated with a different 
one of a plurality of LANs such that all of said LANs are 
monitored through the administrative web site. 

11. The apparatus in claim 1 wherein the WAN comprises 
either a private or a publicly-accessible communications 
network . 

12. The apparatus in claim 11 wherein the publicly 
accessible communications network is the Internet. 

13. The apparatus in claim 1 wherein the processor, in 
response to the stored instructions and if a plurality of 
alarm messages exists, prioritizes and queues each of the 
plurality of alarm messages from the SEP for transmission 
to the administrative web site. 
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1 14, The apparatus in claim 1 wherein the administrative 

2 web site downloads to the memory in the SEP a 

3 corresponding pre-defined configuration profile which 

4 specifies an operational and network environment of the 

5 LAN for subsequent use in initializing the SEP. 

1 15. The apparatus in claim 14 wherein the profile is 

2 communicated through an HTTP message between the 

3 administrative web site and the SEP. 

yj 1 16. The apparatus in claim 15 wherein the SEP further 

y| 2 comprises a web client executed by the processor and the 

y§ 3 administrative web site comprises a web server with the 

sj 4 HTTP message being transported, via the WAN and over a 

^ 5 web connection, from the web client to the web server. 

y ; 1 17. The apparatus m claim 15 wherein the administrative 

W 2 web site signs the HTTP message using a private key 

y, 3 associated with the administrative web site prior to 

4 encrypting the HTTP message. 

1 18. The apparatus in claim 17 wherein the administrative 

2 web site: 

3 converts the profile into extensible markup language 

4 (XML) ; and 

5 forms the HTTP message as containing the XML. 

1 19. The apparatus in claim 18 wherein the administrative 

2 web site: 


-130- 


3 converts the profile into a corresponding WDDX hash 

4 structure; and 

5 translates the WDDX hash structure into the XML. 

1 20. The apparatus in claim 19 wherein the XML, into 

2 which the WDDX hash structure is converted, is 

3 serialized. 

1 21. The apparatus in claim 17 wherein the processor, in 

w 2 response to receiving the HTTP message from the 

yii 3 administrative web site, and in response to the stored 

Jti 4 instructions: 

y^i 5 decrypts the HTTP message so as to define a 

\j 6 decrypted HTTP message; 

7 authenticates the decrypted HTTP message using a 

D 8 signature contained within HTTP message; and 
-JT 9 if the decrypted HTTP message is authentic, stores 

W 10 the profile contained in the decrypted HTTP message in a 

y z 11 database associated with the SEP. 

1 22. The apparatus in claim 21 wherein the processor, in 

2 response to the stored instructions: 

3 converts XML contained within the decrypted HTTP 

4 message into a received WDDX hash structure; and 

5 updates the database in the SEP using the profile 

6 contained in the received WDDX hash structure. 

1 23. The apparatus in claim 14 further comprising the 

2 administrative web site wherein the database contains a 
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3 plurality of customer records, where each of the 

4 plurality of customer records being associated with a 

5 corresponding one of a plurality of different SEPs, and 

6 each of the different SEPs being associated with a 

7 different one of a plurality of LANs such that all of 

8 said LANs are monitored through the administrative web 

9 site, and said each of the customer records having a 

10 separate configuration profile associated with said one 

11 of said LANs. 



1 

24 . A method for use in apparatus for monitoring a local 


2 

area network (LAN) through a remote administrative web 

m 
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(SEP) for connection to the LAN and for connection, 

5 S^S 

5 

through a wide area network (WAN) connection, to the 


6 

administrative web site, wherein the SEP comprises: a 


7 

processor; a memory, connected to the processor, for 


8 

storing computer executable instructions therein; and 


9 

first and second network interfaces, operable in 


10 

conjunction with the processor, for communicatively 


11 

interfacing the SEP, through a first network connection, 


12 

to the WAN and, through a second network connection, to 


13 

the LAN, respectively; the method comprising the steps, 


14 

performed by the processor and in response to execution 


15 

of the stored instructions, of: 


16 

continually monitoring operational status of a 


17 

monitored entity so as to detect an alarm condition 


18 

resulting from an operational failure in the monitored 


19 

entity, the monitored entity comprising the SEP, at least 
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2 0 one of the first and second connections or at least one 

21 of a plurality of servers residing on the LAN; 

22 generating, in response to the alarm condition, an 

23 alarm message containing information related to the alarm 

24 condition; 

25 converting the alarm message into a predefined 

26 format suitable for communication over a web connection 

27 so as to yield a web-communicable alarm message; and 

2 8 transmitting the web- communicable alarm message, via 

2 9 the WAN interface and the first network connection, to 

3 0 the administrative web site which, in response to receipt 
3i 0 f the web-communicable alarm message: 

|B 32 extracts the alarm information from the 

f = 5 33 web- communicable alarm message so as to define extracted 

IS 34 alarm information; and 

ip 3 5 updates a record in a database, maintained by 

^7 36 the administrative web site and associated with the SEP, 

|i| 3 7 to reflect the extracted alarm information. 

1 25. The method of claim 24 further comprising the steps, 

2 performed by the processor, of: 

3 forming an HTTP message containing the alarm 

4 information; and 

5 encrypting the HTTP message to form the 

6 web-communicable message. 


1 
2 
3 


26. The method of claim 25 wherein the SEP further 
comprises a web client executed by the processor and the 
administrative web site comprises a web server, and the 
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4 method further comprises the step of transporting the 

5 HTTP message, via the WAN and over a web connection, from 

6 the web client to the web server. 

1 27. The method of claim 25 further comprising the step, 

2 performed by the processor, of signing the HTTP message 

3 using a private key associated with the SEP prior to 

4 encrypting the HTTP message. 

1 28. The method of claim 27 further comprising the steps, 

y| 2 performed by the processor, of: 

3 converting the alarm information in the alarm 

Wl 4 message into extensible markup language (XML) ; and 

5 forming the HTTP message as containing the XML. 

Q 1 29. The method of claim 28 further comprising the steps, 

^ 2 performed by the processor, of: 

|ii 3 converting the alarm information message in the 

^ 4 alarm message into a corresponding WDDX hash structure; 

5 and 

6 translating the WDDX hash structure into the XML. 

1 30. The method of claim 29 wherein the XML, into which 

2 the WDDX hash structure is converted, is serialized. 

1 31. The method of claim 27 further comprising the steps, 

2 performed by administrative web site in response to 

3 receiving the HTTP message, of: 
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4 decrypting the HTTP message so as to define a 

5 decrypted HTTP message; 

6 authenticating the decrypted HTTP message using a 

7 signature contained within HTTP message; and 

8 if the decrypted HTTP message is authentic, updates 

9 the record in the database in response to the alarm 
10 information carried in decrypted HTTP message, 

1 32. The method of claim 31 further comprising the steps, 

^ 2 performed by the administrative web site, of: 
Cl 3 converting XML contained within the decrypted HTTP 

H| 4 message into a received WDDX hash structure; and 
|y 5 updating the record in the database in response to 

y 6 alarm information contained in the received WDDX hash 

m 7 structure. 

iZ 1 33. The method of claim 24 wherein the database contains 

W 2 a plurality of customer records, where each of the 

£1, 3 plurality of customer records is associated with a 

4 corresponding one of a plurality of different SEPs and 

5 each of the different SEPs is associated with a different 

6 one of a plurality of LANs such that all of said LANs are 

7 monitored through the administrative web site. 

1 34 . The method in claim 24 wherein the WAN comprises 

2 either a private or a publicly-accessible communications 

3 network. 
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1 35. The method in claim 34 wherein the publicly 

2 accessible communications network is the Internet. 

1 36. The method in claim 34 further comprising the step, 

2 performed by the processor, of if a plurality of alarm 

3 messages exists, prioritizing and queuing each of the 

4 plurality of alarm messages from the SEP for transmission 

5 to the administrative web site. 

1 37. The method of claim 24 further comprising the step, 

2 performed by the administrative web site, of downloading 

3 to the memory in the SEP a corresponding pre-defined 

4 configuration profile which specifies an operational and 

5 network environment of the LAN for subsequent use in 

6 initializing the SEP. 

1 38. The method of claim 37 further comprising the step 

2 of communicating the profile through an HTTP message 

3 between the administrative web site and the SEP. 

1 39. The method of claim 38 wherein the SEP further 

2 comprises a web client executed by the processor and the 

3 administrative web site comprises a web server, and the 

4 method comprises the step of transporting the HTTP 

5 message, via the WAN and over a web connection, from the 

6 web client to the web server. 

1 40. The method of claim 38 further comprising the step, 

2 performed by the administrative web site, of signing the 


-136- 


3 HTTP message using a private key associated with the web 

4 site prior to encrypting the HTTP message. 

1 41. The method of claim 40 further comprising the steps, 

2 performed by the administrative web site, of: 

3 converting the profile into extensible markup 

4 language (XML) ; and 

5 forming the HTTP message as containing the XML. 

1 42. The method of claim 41 further comprising the steps, 

2 performed by the administrative web site, of: 

3 converting the profile into a corresponding WDDX 

4 hash structure; and 

5 translating the WDDX hash structure into the XML. 

1 43. The method in claim 42 wherein the XML, into which 

2 the WDDX hash structure is converted, is serialized. 

1 44. The method in claim 40 further comprising the step, 

2 performed by the processor in response to receiving the 

3 HTTP message from the administrative web site and in 

4 response to the stored instructions, of: 

5 decrypting the HTTP message so as to define a 

6 decrypted HTTP message; 

7 authenticating the decrypted HTTP message using a 

8 signature contained within HTTP message; and 

9 if the decrypted HTTP message is authentic, storing 

10 the profile contained in the decrypted HTTP message in a 

11 database associated with the SEP. 
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1 45. The method of claim 44 further comprising the steps, 

2 performed by the processor, of: 

3 converting XML contained within the decrypted HTTP 

4 message into a received WDDX hash structure; and 

5 updating the database in the SEP using the profile 

6 contained in the received WDDX hash structure. 

1 46. The method of claim 37 wherein the database in the 

2 administrative web site contains a plurality of customer 
^ 3 records, where each of the plurality of customer records 
&£! 4 being associated with a corresponding one of a plurality 
n 5 of different SEPs, and each of the different SEPs being 

6 associated with a different one of a plurality of LANs 

Cj 7 such that all of said LANs are monitored through the 

m 8 administrative web site, and said each of the customer 

Q 9 records having a separate configuration profile 

77 10 associated with said one of said LANs. 


